$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa File: 08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa (raw, json) Hash identifier: yRVYbZttwDLTJ1HB9MoSKDxMmiMNxkBZ87zdzw9JA9A= Subject key identifier: 53:13:72:67:AF:5B:32:69:FB:CC:44:EE:20:DB:7A:38:B3:B3:E5:A0 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584E31CF1B4D2297A5BA7F434280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 16839 IP address blocks: 149.96.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:1b:4d:22:97:a5:ba:7f:43:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=a6544812-895e-48b4-98ff-ab5f01dbfebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:7c:4a:83:16:11:03:d2:bd:7f:59:cd:cc: 64:6f:67:0b:1d:30:c0:35:ff:57:e0:98:b6:d2:ba: fa:9e:44:ad:e9:86:27:cb:e6:33:ed:b4:70:a6:17: ee:79:01:9d:21:51:92:a0:0a:3a:31:c6:1b:a8:0f: 0b:f1:10:0a:de:ee:08:bd:20:ea:1d:61:82:48:4f: 4b:9f:c1:a1:12:ca:3e:60:aa:d9:62:f6:f9:19:e2: e7:d5:60:50:f0:26:79:75:f2:21:9e:e5:54:9e:5c: 00:30:8c:01:7c:13:1d:a0:6a:3d:55:76:bd:88:62: 4f:2d:df:9c:99:fb:76:50:4c:86:c1:58:91:6a:02: 4b:16:9a:c5:cc:4a:1a:59:85:fd:51:54:a0:4e:7e: cd:d0:4f:92:db:f1:7d:5a:ac:7e:f1:be:68:7a:c8: c5:2a:13:fa:fb:83:48:bd:1b:f9:a3:fb:af:3f:b9: b9:e3:2a:f4:cb:ee:fe:e1:4f:70:c3:fa:2a:84:c4: 95:67:cc:a3:6e:d3:70:29:c5:c8:00:3f:b6:74:2f: 86:83:b4:12:07:46:54:e5:a4:54:d8:66:dd:5f:0d: af:e3:7b:09:c0:ba:ff:b0:55:66:5c:6c:5f:0d:f9: 02:48:1c:17:0b:b0:ee:98:f7:b3:a2:65:00:fa:be: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:72:67:AF:5B:32:69:FB:CC:44:EE:20:DB:7A:38:B3:B3:E5:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/08ad7ae1-4bfa-3d1c-96ac-a9e2cea1430c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ab:75:db:6e:cd:ad:d6:ba:ea:e3:4a:8e:2a:5a:37:95:c3: 96:b7:70:1b:50:78:f2:e4:55:f8:bd:52:b2:ad:70:6a:f9:32: 8e:48:51:b5:73:b7:1d:dd:26:b1:12:37:09:a7:2a:da:d4:19: 07:10:f1:07:c8:ef:88:fb:ec:3e:fd:98:a3:04:00:f0:2f:e3: 5c:3c:d7:9e:96:1c:4a:4f:99:60:a3:b7:b8:3c:3f:ce:67:3c: 45:a5:31:00:ff:67:9d:5b:f2:cd:95:79:4b:9c:23:c2:91:5f: 84:bf:e5:2d:fc:78:5c:69:33:41:70:de:b4:97:59:ae:76:43: f3:55:97:ab:fa:99:f4:fa:17:d9:81:13:27:56:27:f1:fe:31: 6f:50:a0:ff:c5:66:fa:05:db:0d:5a:d2:bb:28:03:da:62:3c: f8:22:60:c3:02:87:92:2a:8d:29:3a:43:34:36:62:f1:ff:ba: bb:75:d4:ab:aa:83:f4:3d:d6:65:2e:f1:df:b5:e0:ae:fa:b6: f4:43:66:35:0f:04:ed:98:aa:93:75:ac:96:5d:02:27:b2:e6: c4:2a:b3:07:76:4b:3e:15:c9:73:e3:9f:54:b5:17:d4:04:d8: 56:76:01:77:fb:68:ef:57:09:7d:40:a8:70:5c:8a:0e:9d:26: 99:ef:7b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxtNIpelun9DQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YTY1NDQ4MTItODk1ZS00OGI0LTk4ZmYtYWI1ZjAxZGJmZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyV8SoMWEQPSvX9Zzcxkb2cLHTDANf9X4Ji2 0rr6nkSt6YYny+Yz7bRwphfueQGdIVGSoAo6McYbqA8L8RAK3u4IvSDqHWGCSE9L n8GhEso+YKrZYvb5GeLn1WBQ8CZ5dfIhnuVUnlwAMIwBfBMdoGo9VXa9iGJPLd+c mft2UEyGwViRagJLFprFzEoaWYX9UVSgTn7N0E+S2/F9Wqx+8b5oesjFKhP6+4NI vRv5o/uvP7m54yr0y+7+4U9ww/oqhMSVZ8yjbtNwKcXIAD+2dC+Gg7QSB0ZU5aRU 2GbdXw2v43sJwLr/sFVmXGxfDfkCSBwXC7DumPezomUA+r5sNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMTcmevWzJp+8xE7iDbejizs+WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMDhhZDdhZTEtNGJmYS0z ZDFjLTk2YWMtYTllMmNlYTE0MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJurddtuza3WuurjSo4qWjeVw5a3cBtQePLkVfi9UrKtcGr5Mo5IUbVz tx3dJrESNwmnKtrUGQcQ8QfI74j77D79mKMEAPAv41w8156WHEpPmWCjt7g8P85n PEWlMQD/Z51b8s2VeUucI8KRX4S/5S38eFxpM0Fw3rSXWa52Q/NVl6v6mfT6F9mB EydWJ/H+MW9QoP/FZvoF2w1a0rsoA9piPPgiYMMCh5IqjSk6QzQ2YvH/urt11Kuq g/Q91mUu8d+14K76tvRDZjUPBO2YqpN1rJZdAiey5sQqswd2Sz4VyXPjn1S1F9QE 2FZ2AXf7aO9XCX1AqHBcig6dJpnve3o= -----END CERTIFICATE-----Generated at Sun Jun 28 17:22:47 2026 by rpki-client